Digital Content
Subscribe to this community
GDPR: What's your justification?
[Updated Oct.19 to add EDPB on Necessary for Contract and ICO on Consent][Updated Sep.18 t...
IP Addresses, Privacy and the GDPR
It's well-known that the General Data Protection Regulation says that IP addresses sho...
GDPR: Backups, Archives and the Right to...
I was recently asked how the GDPR's Right to Erasure would affect backups and archives...
GDPR: Alumni processes
Most universities maintain databases of alumni, for purposes including keeping them informed about the organisation, offering services and seeking donations. These activities have a lot in common with other charities, so the Informatio...
GDPR: Attendance Monitoring
A question recently arose about monitoring students' attendance at lectures and tutori...
AI and Ethics: GDPR and beyond
The EU High-Level Expert Group's (HLEG) draft Ethics Guidelines for Trustworthy AI con...
GDPR: Recording Phone Calls
Most of us are familiar with the recorded messages at the start of phone calls that warn &...
Investigatory Powers Act - process detai...
The Government's powers make orders relating to information about communications have ...
Wellbeing analytics: legal explorations
While colleagues are looking at whether data can be used to pick up early signs of mental ...
DPIAs: First Attempts
Article 35 of the General Data Protection Regulation introduces a requirement to conduct a...
GDPR: 12 Steps Illustrated
I've been trying to produce a visual image to capture the twelve steps to GDPR compliance.For details of the individual steps see:AwarenessData Protection by DesignInformation Lifecycle AuditBreach Notification Process [Article 29 Working Party guidance]Legal Basis [Information Commissioner guidance]Privacy Notices [Article 29 Working Party guidance]Individual Rights Proces...
Federated Access Management and the GDPR
[this article is based on the draft text published by the European Council on 28th January 2016. Recital and article numbers, at least, will change before the final text]When individuals register to access a website or other on-line se...
COVID-19 Cyber Threat Coalition and GDPR
[Notes:This isn't legal advice, but I hope it will reassure anyone considering supporting the COVID-19 Cyber Threat Coalition that the data protection risks should be very low;This only covers the use of data for defending systems,...
GDPR: Official CSIRTs?
A couple of organisations have asked me recently whether the General Data Protection Regul...
AI in Education: is it different?
Reflecting on the scope chosen by Blackboard for our working group - "Ethical use of AI in Education" - it's worth considering what, if anything, makes education different as a venue for artificial intelligence. Education...
Signposts for Ethics in Immersive Techno...
[What I meant to say at the Westminster e-Forum on Immersive Technologies]Here we have some creepy applications of immersive technologies. Body-cameras and mobile phone apps that scan every passing face and search for anything they can find out about their identities and contacts… Incidentally, I've no idea what the smiley faces on the body-cam mean, but can you thin...
GDPR: Wifi access
Many, perhaps most, wifi access services want to perform some sort of authentication of people who use them (for those providing connectivity via Janet, it's a requirement of the Eligibility Policy). Since authentication involves some processing of personal data, it's worth reviewing how different ways of doing that might be affected (or not) by the General Data Protect...
Laws to help security and incident respo...
Last week I was invited to be a member of a panel at the UN Internet Governance Forum on h...
Latest activity
JiscCommunity has been this blog's home for eight years, but I'm now moving over to JiscInform. That has many nice features, notably that it works really well on...
[UPDATE: thanks for your feedback. Final text has now gone into the Jisc production process :)]
Jisc has been providing expert, trusted advice on digital...
[with thanks to a former university Head of Examinations for input and discussion]
Recent years, and weeks, have seen a move away from the traditional...
I've been reading a fascinating paper by Julia Slupska – "War, Health and...
[Notes:
- This isn't legal advice, but I hope it will reassure anyone considering supporting the...
[Notes:
- This isn't legal advice, but I hope it will reassure anyone considering supporting the...
The EU High-Level Expert Group's (HLEG) draft Ethics Guidelines for...
Service report for organisations in Yorkshire Humberside connected to the Janet network
